OpenSource — Cybersecurity News

Jscrambler npm Package Compromised - Malicious Releases Deploy Cross-Platform Infostealer

RedSide Security July 13, 2026 Vulnerability 28 views

Attackers compromised the Jscrambler npm package and published multiple malicious versions containing a cross-platform Rust infostealer. The malware targets cloud credentials, GitHub tokens, AI coding tools, cryptocurrency wallets, and CI/CD environments, highlighting the growing risk of software supply chain attacks against developers.

Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards

RedSide Security June 10, 2026 Tools & Technology 79 views

Anthropic has released Claude Fable 5 with built-in cybersecurity safeguards and a restricted twin model, Mythos 5, highlighting a new dual-track approach to AI deployment where capability and security controls are separated.

New Open-Source Tool: TeleSink - Turning Malware C2 Against Itself

RedSide Security June 10, 2026 Tools & Technology 127 views

TeleSink is an open-source malware analysis tool that redirects Telegram bot traffic into a controlled local environment, enabling real-time extraction of bot tokens, chat IDs, and exfiltrated data without manual deobfuscation.

Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories

RedSide Security June 05, 2026 Cyber Attacks 73 views

A critical flaw in Anthropic's Claude Code GitHub Action allowed attackers to potentially hijack repositories through a single GitHub issue. The vulnerability combined weak bot validation, prompt injection, and excessive workflow permissions, highlighting the growing security risks of AI-powered CI/CD automation.

Microsoft Launches Open-Source WinApp CLI to Streamline Windows App Development

RedSide Security January 24, 2026 Tools & Technology 160 views